Privacy Policy.

Last updated: July 2026 · Law Lab Africa LLC

1. Who We Are

Law Lab Africa LLC ("Law Lab Africa", "we", "us", "our") is a technology compliance consultancy. Our registered office is in the United States, and we operate across Africa and globally. Our website is www.lawlab.africa.

For data protection purposes, Law Lab Africa LLC is the data controller in respect of personal data collected through this website and in the course of providing our services.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, including when you:

• Submit an enquiry through our contact form (name, email address, organisation name, and message content)
• Join a course or product waitlist (name and email address)
• Subscribe to the Data Protection Digest newsletter via dataprotectiondigest.africa
• Book a consultation via Calendly
• Communicate with us by email

We do not use tracking cookies, advertising technologies, or third-party analytics services that collect personal data. Website analytics are provided by Vercel's cookieless analytics infrastructure. No personal data is collected through analytics.

3. How We Use Personal Data

We use personal data you provide for the following purposes:

• Responding to enquiries: to respond to questions and provide information you have requested
• Service delivery: to provide compliance advisory, research, and training services
• Newsletter distribution: where you have subscribed to the Data Protection Digest
• Legal obligations: to comply with applicable law, regulatory requirements, and professional obligations

4. Legal Basis for Processing

We process personal data on the following legal bases: performance of a contract or pre-contractual steps (service enquiries and delivery); our legitimate interests in operating our business (internal administration and communication); and your consent where expressly given (newsletter subscription).

5. Retention

We retain personal data only for as long as necessary for the purposes described above, or as required by applicable law. Enquiry records are generally retained for six years. You may request deletion at any time (see Section 7 below).

6. Sharing Personal Data & Processors

We do not sell, rent, or trade personal data. We use a small number of named service providers (processors) who process personal data on our instructions, under contract:

• Resend: transactional email delivery for enquiries and waitlist confirmations
• Supabase: secure storage of contact-form and waitlist submissions
• Calendly: scheduling of consultation calls
• Vercel: website hosting and cookieless, aggregate analytics
• Beehiiv: newsletter delivery, only if you subscribe to the Data Protection Digest

We may also disclose personal data where required by law or legal process. Some of these providers process data outside your country of residence; where they do, we rely on the provider's contractual safeguards for that transfer.

7. Your Rights

You have the right to access, correct, or request deletion of personal data we hold about you. Depending on your jurisdiction of residence, you may also have rights of portability, restriction, and objection. To exercise any of these rights, contact us at info@lawlab.africa.

Law Lab Africa LLC is incorporated in the United States, but where we process the personal data of data subjects in Kenya, the Kenya Data Protection Act, 2019 applies. Kenyan data subjects may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke. If you are in another jurisdiction, you may complain to your local data protection authority.

8. Contact

For questions about this policy or our data handling practices, contact us at info@lawlab.africa.